Might make sense.  We might want to set a bar on length before calculating the 
%inflation.  Whether that's the absolute length as in Tika or another 
threshold...2000 bytes expanded out of 10 wouldn't be a bomb...the bomb happens 
after you hit a certain length where a bomb could actually cause problems.  

Thank you, again!

Best,

          TIm

-----Original Message-----
From: Andreas Beeker [mailto:[email protected]] 
Sent: Thursday, July 23, 2015 1:31 PM
To: POI Users List <[email protected]>
Subject: Re: reasonable threshold for ZipSecureFile?

> Just to confirm absolutely, ZipSecureFile is only used on ooxml files, right?

It's activated over the ZipHelper which itself is only used in ooxml context.

I wonder, if we should change the default value, as you having problems with 
normal files?
(given that my assumptions about AND/OR are correct ...)

Andi.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to